HIPAA Links

Health Insurance Portability & Accountability Act of 1996

Last updated February 14, 2004

NEW! Separate page for EDI, Transactions Testing, and Clearinghouse Vendor Links at
HIPAA EDI Links
Easier URL! This page is now also available at http://hammerlogic.com

Monitor this page
for changes

by ChangeDetection

Compiled by Hammer Logic LLC

Annotations are generally from the web pages referenced.
No warranty is stated or implied, and inclusion here does not constitute an endorsement.

Jump to:

Federal Government Sites	Implementation Guides from WPC	State Government Sites
State Medicaid Sites	Associations and Organizations	Accreditation and Standards
Journals, Publications & Businesses	ListServs	Other Sites

Federal Government Sites (.gov)

Federal Register

January 23, 2004

August 15, 2003

May 27, 2003

Department of Health & Human Services - Semiannual Regulatory Agenda (PDF format)
Department of Health & Human Services - Semiannual Regulatory Agenda (text format)

July 2003: Final standard unique health care provider identifiers rule (sequence 880)
July 2003: NPRM for electronic Medicare claims submission (sequence 868)
NOTE: Interim Final Rule published August 15, 2003
August 2003: Final standard unique national health plan identifiers rule (sequence 879)
January 2004: NPRM for claims attachments standards (sequence 842)
February 2004: NPRM for modifications to transactions and code sets rule (sequence 875)

April 17, 2003

March 20, 2003

February 20, 2003

August 14, 2002

Final Rule (modified); Standards for Privacy of Individually Identifiable Health Information (PDF format)

May 31, 2002

April 15, 2002

Announcement of the Availability of a Model Compliance Plan (PDF format)

March 27, 2002

December 27, 2001 (from H.R. 3323)

August 17, 2000

HHS - Office of the Assistant Secretary for Planning and Evaluation - Administrative Simplification in the Health Care Industry - THE place to start!

Department of Health & Human Services - Search Questions & Answers Database

Transactions and Code Sets
Privacy and Security
Identifiers
Submit questions on Electronic Transactions to HHS
Submit questions on Privacy to the Office of Civil Rights
HHS - Questions Submitted by the Public, by Date Posted to the Website

HHS - P.L. 104-191-Health Insurance and Portability Act of 1996
HHS - Press Releases

March 21, 2001

CMS - Centers for Medicare and Medicaid Services (the agency formerly known as HCFA)

HIPAA Welcome Page

HIPAA Health Insurance Reform
HIPAA Administrative Simplification

HIPAA Administrative Simplification News
General Information
Regulations & Standards
HIPAA Enforcement
Upcoming Events
Educational Materials
HIPAA Related Links
Contacting CMS

Medicaid HIPAA Administrative Simplification
State Medicaid HIPAA Coordinators (pdf)
CMS Information Security
HCFA Internet Security Policy
Medicare EDI
Medicare HIPAA Documents

IHS - Indian Health Service - HIPAA

NCVHS - The National Committee on Vital and Health Statistics

- The Public Advisory Body to the Secretary of Health and Human Services

NIH Listserv

- Join HIPAAADMINSIMPL and HIPAA-REGS mailing lists (low volume). Search for and join other NIH sponsored mailing lists

NIST - National Institute of Standards and Technology

NIST Special Publications

- See especially SP 800-26: Security Self-Assessment Guide for Information Technology Systems, November 2001

CSRC - Computer Security Resource Center

OCR - Office for Civil Rights

- Responsible for implementing and enforcing the HIPAA privacy regulation.

Department of Health & Human Services Searchable Questions & Database

Go directly to the Privacy of Health Information/HIPAA search category.

What's New page
OCR Guidance Explaining Significant Aspects of the Privacy Rule (December 4, 2002)

SAMHSA -Substance Abuse and Mental Health Services Administration

- HIPAA Information Home Page

Simple chart of alcohol and substance abuse treatment procedure codes (HCPCS & CPT)

U.S. Government Printing Office

- Link to the Federal Register, among others

The Official Publisher of HIPAA Implementation Guides

Washington Publishing Company Home Page - Official publisher of the HIPAA Implementation Guides

HIPAA Implementation Guides - All X12N Implementation Guides adopted for use under HIPAA and their corresponding Addenda are free when downloaded from this site. Prices listed are for bound copies. The entire collection is also available on CD-ROM.

NOTE:

HIPAA Implementation Guides: Addenda - Approved for Publication by X12N on October 10, 2002.
WPC Combined Implementataion Guides for each of the transactions adopted for use under HIPAA. The WPC Combined Guides incorporate the original May 2000 Implementation Guides and the revisions from the October 2002 Addenda. The WPC Combined Guides are WPC products, and are intended to aid in the implementation of the transactions by combining the official documents into one single user friendly document for each transaction.
Some of the WPC Combined Guides also contain known errata clarifications and corrections to typographical errors found in the original May 2000 and October 2002 Addenda documents. For WPC Combined Guides that contain these errata corrections, details of these corrections are outlined in each Implementation Guide's Appendix D.
There is a nominal charge for each WPC Combined Implementation Guide.
Please note that the WPC Combined Guides are not official X12, X12N or X12N Task Group work products, nor are they adopted for use under HIPAA.
HIPAA Implementation Guide Table Data - Provided in conjunction with the Data Interchange Standards Association (DISA).
Provider Taxonomy

Health Care EDI Transactions: A Business Primer

OnlyConnect(R) Gap Analysis Tool

FirstPass Testing Tool

State Government and State-Specific HIPAA Sites

IL - State of Illinois Draft HIPAA Preemption Analysis

State Medicaid Sites

Professional Associations and Organizations (.org)

American Association of Health Care Administrative Management

AAHP - American Association of Health Plans
AAMC - American Association of Medical Colleges

Guidelines for Academic Medical Centers on Security and Privacy

The Guidelines for Academic Medical Centers on Security and Privacy: Practical Strategies for Addressing the Health Insurance Portability and Accountability Act (HIPAA) addresses the unique concerns of academic medical centers.

ASCO - American Society of Clinical Oncology
AFEHCT - Association for Electronic Healthcare Transactions

HIPAA Implementation White Papers

ASPIRE Project

AHA - American Hospital Association's HIPAA Standards Home Page

Includes overview, advocacy materials, tools & resources, and links.

AHIMA - American Health Information Management Association
AHIMA - Privacy Officer Sample Position Description

ILHIMA - Illinois Health Information Management Association
MHIMA - Michigan Health Information Management Association
OHIMA - Ohio Health Information Management Association
ORHIMA - Oregon Health Information Management Association

AHLA - American Health Lawyers Association

Leading health law to excellence through education, information, and dialogue, the American Health Lawyers Association (Health Lawyers) is the nation's largest, nonpartisan, 501(c)(3) educational organization devoted to legal issues in the healthcare field.

AMIA - American Medical Informatics Association
CHIM - Center for Healthcare Information Management

...the association driving strategic information management and technology in the health industry

CHIME - the College of Healthcare Information Management Executives

...serving the professional needs of healthcare's CIOs

CHITA - Community Health Information Technology Alliance - see WEDI SNIP Affiliates, below
CHCF - California Health Care Foundation
DISA: Data Interchange Standards Association

home for the development of cross-industry electronic data interchange standards that provide the foundation to enable individuals, companies and organizations to participate in global e-business.

EDISEC

AFEHCT-WEDI Healthcare Internet Interoperability Pilot

EHNAC - Electronic Healthcare Network Accreditation Commission

HCCO - HIPAA Conformance Certification Organization

HCCO is a nonprofit organization serving the healthcare community with practical guidelines for complying with HIPAA, and with accreditation standards and services. HCCO is open to any individual, covered entity, vendor or organization that would like to be involved in developing cohesive strategies for HIPAA compliance implementations. We believe that all cost-effective and successful compliance strategies will require a common approach to implementation among communities of vendors and providers. Our members have come together in a spirit of cooperation to compile implementation guidelines that help ensure business continuity among trading partners.

HealthKey - National HealthKey Program

"Advancing Health Information Infrastructures" Privacy practices and PKI solutions for responsible, reliable and affordable use. HealthKey is a multi-state, Robert Wood Johnson Foundation funded project to create a replicable model for Public Key Infrastructure (PKI) for the health care industry.

HFMA - Healthcare Financial Management Association

Includes HIPAA Resources: Readiness Survey Results, Risk Factor Assessment Tool (member benefit), status report, seminars, audioteleconferences, books, audiotapes, articles and technical documents and >annotated links.

HHIC - Hawaii Health Information Corporation

a private, not-for-profit corporation established in 1994, is Hawaii's leading health care information organization. HHIC's mission is to collect, analyze and disseminate statewide data to support the healthcare community's continuous efforts to improve quality and cost-efficiency.

HIPAA Readiness Collaborative

Pilot Policies - Eight pilot policies in PDF format

HIMSS - Healthcare Information and Management Systems Society

...a not-for-profit organization representing information and management systems professionals in healthcare, serving our members, our customers, and our industry by providing leadership, education, and networking.

CPRI Toolkit for Health Care Security Management, Version 3

HIPAA GIVES

Government Information Value Exchange for States (GIVES) is a collaborative state government health care focus group resulting in the sharing of information through a clearinghouse highway and providing a forum for discussing and resolving issues in meeting the Health Insurance Portability and Accountability Act (HIPAA) legislation. GIVES has been established to meet the immediate need to exchange information, identify common government challenges and share solutions in order to attain HIPAA compliance in the timeframe required. By providing a government focused network, our goal is to minimize duplicate effort ......Membership is limited to state and local government agencies. Vendors may participate only if their membership is sponsored by a current GIVES state government member.

JHITA - Joint Healthcare Information Technology Alliance

Presentations and handouts

2000 HIPAA Conference

MHSIP-Mental Health Statistics Improvement Program

The Mental Health Statistics Improvement Program is a community of people who share the belief that improvements in mental health services can occur when decision-makers--be they service providers, hose who pay for services, or those who receive them--make rational decisions based on objective, reliable and comparable information about those services.

MS-HUG - Microsoft Healthcare Users Group, Inc.

MS-HUG is not affiliated with Microsoft Corporation. We are an independent, not-for-profit organization catering to the needs of information systems developers and users in the healthcare industry. MS-HUG is funded by individual and corporate membership dues and conference revenues.

NASMHPD - National Association of State Mental Health Program Directors

National Research Institute, Inc.
HIPAA Codes

NCHICA - North Carolina Healthcare Information and Communications Alliance

About HIPAA Early View Privacy and HIPAA Early View Security self-evaluation tools

NEHEN - New England Healthcare EDI Network

POA - Privacy Officers Association
Rx2000 Institute

The Rx2000 Institute is an independent, non-profit member supported organization dedicated exclusively to informing the healthcare industry about business, technology and information issues that can have significant impacts on patient care and business continuity.(NOTE: Much of this site is available only to members.)

USMI - U.S. Medicine Institute - HIPAA Resource Center
WEDI - Workgroup for Electronic Data Interchange

WEDI SNIP - Strategic National Implementation Process for complying with the Administrative Simplification provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Includes three workgroups: Transactions, Education and Security/Privacy. Sponsors audiocasts and quarterly forums.
Regional WEDI SNIP Affiliates - Listing includes area covered, RSA name,web site URL, primary contact info, and RSA application.

The Work Group - Workgroup for the Computerization of Behavioral Health and Human Services Records

HIPAA Headquarters

Accreditation and Standards Organizations (.org)

HIPAA-DSMO

Transaction Change Request System
View Change Requests
FAQs

HIPAA Designated Standards Organizations (DSMOs) (for Electronic Transactions)

ASC X12 - Accredited Standards Committee

X12N Insurance Subcommittee

ADA - Dental Content Committee of the American Dental Association
HL7 - Health Level Seven
NCPDP - National Council for Prescription Drug Programs
NUBC - National Uniform Billing Committee
NUCC - National Uniform Claim Committee

HIPAA Data Content Committees (DCCs) (for Electronic Transactions)

NUBC - National Uniform Billing Committee
NUCC - National Uniform Claim Committee
WEDI - Workgroup for Electronic Data Interchange
ADA - American Dental Association

Journals, Publications and Businesses (.com & .net)

AdminiSoft, Inc.

HIPAAxchange from AdminiSoft, Inc. is the health care industry's leading standalone HIPAA transaction compliance solution. Coexisting with current benefits administration software and hardware/network environments, HIPAAxchange takes you to a new level of administration --providing the foundation for lower administrative costs and faster, more efficient service to participants, employers and providers.

appLabs Technologies

Product:

Services:

Axiom Systems

HIPAA Services:

HIPAA Products:

BizTalk Accelerator for HIPAA (Microsoft)

BizTalk Accelerator for HIPAA gives healthcare organizations the ability to quickly implement and continually maintain the new transaction standards set by the Heath Insurance Portability and Accountability Act of 1996 (HIPAA). A complete operating environment combined with a rapidly deployable and continuously updateable product set, the Accelerator provides healthcare organizations with the freedom they need to concentrate on their core business. The industry expertise of Washington Publishing Company, the implementation expertise of Global Systems Integrators, and the product expertise of Microsoft provide a product that can reduce the time and risk associated with HIPAA compliance, allowing organizations realize a significant return on investment.

B.I.G. - Boundary Information Group

The Boundary Information Group (BIG), incorporated in 1995, is a strategic alliance of consulting firms that offer complementary services in the management of health care information. Most of these organizations are entrepreneurial, are headed by their founders, and have small, elite staffs with outstanding competence in their specialties. Consultants from these firms are selected as needed to create the most appropriate team for each component of a client’s project.

CIO.com

Not directly HIPAA related, but has useful information

Claredi

^SM

CMHC Systems

CMHC Systems has been a recognized leader in the development and delivery of information technology and business solutions to the healthcare and human services industries for 25 years. With its tight integration of clinical, service, financial, and administrative information, the CMHC/MIS provides operational and decision support through total management of information. It interfaces with all major network architectures and many third party products. We're also experts when it comes to addressing client concerns beyond hardware and software technology, and have partnered with leading experts and national authorities to provide a comprehensive package of business management and HIPAA compliance Consulting Services.

Comply Assistant

- Blass Consulting LLC

The ComplyAssistant family of software tools are designed to provide healthcare organizations with a means to better manage their compliance projects. Each version has the same design, which includes surveys, issue management, incident recording, task management, risk assessment, mitigation planning, workplans, budgeting, snapshot graphs and reports, PHI dataflow management, business associate contract management, and policy management. The end result is a central database of due diligence documentation. The software license fee is a one time enterprise-wide fee. Implementation normally takes 3-5 days depending on the size of the organization. Annual maintenance is provided for ongoing support. HIPAA ComplyAssistant is the only product on the market with project management support for all three major HIPAA components: Privacy, Security and TCS. HIPAA ComplyAssistant is available for hospitals and large healthcare providers, multi-physician practices, and single physician practices. White papers are also available.

Covansys

Our health care consulting teams integrate industry- specific financial, clinical, and information technology experience along with extensive HIPAA knowledge to provide you with the expertise your organization needs to ensure that your products and services meet the HIPAA compliance requirements.

CPI Directions, Inc.

Delivering Consultant and Performance Improvement Support for Over a Quarter Century to Providers of Medical & Nursing, Behavioral Health, MR/DD, AIDS/HIV, Substance Abuse, and Children's & Family Services. CPI Directions, Inc. makes available a wide spectrum of consultant and performance improvement support, including expert preparation for HIPAA compliance, JCAHO & NCQA surveys, NYS & NYC certification visit and Federal Medicaid & Medicare audits.

Davis Wright Tremaine LLP

Health Care - eHealth/HIPAA Practice Area

eHealth/HIPAA mission: to serve the healthcare industry with the highest of professional services and legal expertise, providing long range insight and political legislation perspective. Davis Wright Tremaine's eHealth and HIPAA Law Groups, which are part of the Health Law Group of Davis Wright Tremaine, furnish practical answers and strategies posed by electronic and Internet technologies used in the health care industry.

EMR Legal

Veterans Press

HIPAA Compliance Tools, including The Compliance Guide (with sample policies on diskette), compliance videos, and other resources.

EDIdEv LLC

Product:

ESRI - GIS and Mapping Software

GIS for Health and Human Services -- includes a HIPAA Forum and "Protecting Geocoded Health Data"

Foresight Corp.

HIPAA Validator Suite: Desktop, Online, Server, Instream & EDISIM.

GEFEG USA

Healthcare Informatics Online

Healthcare Informatics on HIPAA

...a monthly business magazine that provides timely, high-quality intelligence about information technology for the executives and managers on the IT decision-making team in healthcare facilities and organizations of every type. We present news, features and resource lists; analyze and interpret major trends influencing the healthcare market; report on major IT installations; and cover both domestic and global issues.

Healthcare Software Solutions

EDI Translator:

Healthcare Technology Consulting, Inc.

Healthcare Technology Consulting, Inc is a nationwide company serving hundreds of clients every year in health care, pharmaceutical, medical device and regulated environments. HTC's primary focus has been helping clients with compliance to FDA and HIPAA Regulations. HTC, Inc. is a full service consulting firm offering simplified compliance solutions at competitive prices without interrupting the daily operations of the office environment.

HIPAA4U -

Services:

Products:

HealthAgent.Net

HealthAgent.Net™ is the pioneer of private, secure peer to peer (P2P) networking. HealthAgent™ is the name of HealthAgent.Net™ technology that will change the way people view the Internet. HealthAgent technology allows people to easily create private networks between PCs over the Internet. Intelligent HealthAgent Technology™ applications enable health care companies, organizations and providers to easily create private, secure encrypted P2P networks between PCs over the Internet. Demo and download available from the web site.

Health Data Management

HIPAA Archive - past articles on HIPAA by publication date.

HealthLeaders

HIPAA Summits

Past HIPAA Summits
The Health Colloquium at Harvard

Train for HIPAA

Train for HIPAA offers comprehensive HIPAA training ranging from e-learning solutions, through onsite training, to special access to national conferences and audioconferences. Train for HIPAA's solutions are easily accessible, innovative and cost-effective, and permit tracking, testing and certification of completion. Train for HIPAA is a member of the Train for Compliance family of healthcare regulation and compliance training websites. Train for HIPAA is an Affiliate of the HIPAA Summit Conference Series, the HIPAA Colloquium Harvard University, and HIPAA Audioconferences.

HIPAAAdvantage

HIPAAdvantage Compliance Toolkit is an easy-to-use, easy-to-manage software program designed to streamline and systemize your HIPAA privacy compliance efforts. It is a comprehensive program that can be used to assess readiness to achieve HIPAA privacy compliance; to organize and track HIPAA compliance activities; and, to ensure audit-readiness in the event of an internal or external audit.

Content

Capability

Community

HIPAAlert Archives Volume One: 10/1999-9/2000
HIPAAlert Archives Volumn Two: 10/2000-12/2001

HIPAAntidote - a service of Strategic Healthcare Initiatives, Inc.

REGIMEN™ - Office, Employer and Hospital compliance products; plus Training product for all covered entities. All available on CD-ROM.

HIPAA Colloquium at Harvard

August 19 - 23, 2002

HIPAA Complete

HIPAA Complete is focused on helping the Health Care Industry meet the Challenge of achieving compliance with HIPAA mandated regulations. Our Company has made significant investments towards dedicating resources to research and education concerning the ongoing regulatory process of implementing the Administrative Simplification portion of HIPAA. We specialize in providing the necessary expertise to coordinate the revision and supplementation of your existing information technology infrastructure, workflow processes, policies & procedures to meet strict new HIPAA Requirements. HIPAA Complete's abilities provide your organization with a comprehensive, reliable resource for assistance with this vast and challenging project.

HIPAAComply

HIPAA Consulting, FOX Systems

This web page is designed to be a leading source of tools and information on the Administrative Simplification (AS) provisions of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) for health care private and public payers. This site includes FAQs, a Glossary, a Self-Assessment tool, and other items.

HIPAAdirect.com

HIPAA Implementation Newsletter

Published periodically by Lyon, Popanz & Forester, a management-consulting firm that designs and manages projects that solve management problems. Planning, program management offices, and project management for HIPAA are areas of special interest.

HIPAAInfo.net

hipaainfo.net is the premier content knowledge resource to keep current on the Health Insurance Portability And Accountability Act (HIPAA) and identify resources that can be used to understand and implement HIPAA.

HIPAA-IT

The 'Administrative Simplification' provisions of the Health Insurance Portability and Accountability Act (HIPAA) are the most significant of any federal legislation impacting health care information systems. This site offers the most comprehensive and incisive books on the information systems implications of HIPAA. Our products include Monthly Updates the latest HIPAA practices HIPAA@IT Reference the most comprehensive book HIPAA@IT Essentials the essential subset of 'HIPAA@IT Reference' Information Systems for Healthcare Enterprises the introductory book Instructor's Manuals with numerous multiple-choice questions and exercise answers

HIPAAIT411

We are an IT training company, our goal is to facilitate accordance with HIPAA law for area health providers and clearing houses. Any one facility in need of compliance can use our site and attend our seminars to help with their HIPAA transition. We are your total solution provider for HIPAA Information Technology.

HIPAA Monitor

Developed by FlexTech, HIPAA Monitor is an affordable web-based assessment tool capable of performing the most comprehensive measurement of HIPAA risk available. It supports managed care organizations, hospitals, medical groups, physicians and their related business associates. FlexTech and MacBain & MacBain have joined forces to develop HIPAA Monitor, a comprehensive, user-friendly, web-based HIPAA gap assessment tool. The result is a novel investigative approach, which includes a department-specific breakdown of requirements and questions on a web-based, interactive tool providing assessment and analysis to assist health care organizations with ongoing compliance efforts.

HIPAA.org

Sponsored by Claredi. One page table of the major HIPAA resources sites.

HIPAA Testing

Services:

HIPAA*PO

HIPAA*PO™ is the brand name for a set of inexpensive, user friendly, tools and resource programs to help healthcare practitioners achieve compliance with HIPAA's Privacy and Security regulations. Specifically our tools can help you: Achieve compliance in the shortest time possible; Reduce the overall cost of compliance; Minimize the impact of the compliance effort on day-today operations; Train staff in HIPAA compliance; Prepare a full response to both privacy and security requirements - not just legal forms; Manage your compliance planning and implementation activities with a powerful project management tool.

HIPAA Solutions Rx

Products & Services:

Paramore Consulting/EMSI, Inc. offer the "HIPAA Survival Kit". The HIPAA Survival Kit from Paramore Consulting and EMSI, is a targeted set of services that will help you emerge from the HIPAA maze fully compliant and fully sane.

Holistic Training Solutions

Holistic Training Solutions, LLC (HTS), founded by Merida Johns, PhD, a recognized national expert in health information management, provides tools and consulting services that take a holistic approach to HIPAA training & implementation. HTS makes training and implementation easy through problem-centered, interactive solutions using multimedia elements in meaningful ways. Holistic Training Solutions provides tools and consulting services that take a holistic approach to HIPAA training & implementation. We take into account the organization, its people, and its context. HTS makes training and implementation easy through problem-centered, interactive solutions using multimedia elements in meaningful ways.With a team of experienced healthcare professionals, instructional design and content experts, HTS brings you smarter training and implementation tools.

HospitalConnect

Key Issues: HIPAA

Hush Communications

Hush Communications has created a fully secure, user-friendly encryption engine that has the power and flexibility to protect all forms of online communications. The foundation of Hush's products is the Company's patented key pair management technology backed by the power of its OpenPGP encryption technology. Through the Hush Encryption Engine™, the Hush Key Servers also takes care of public/private Key exchange in a completely seamless fashion. When a user wishes to encrypt/decrypt data or verify/sign a signature, a connection is automatically made to the Hush Key Server Network to retrieve the necessary public/private Key.

Information Security Magazine

The authority in security news, insight and analysis.

Inside Healthcare Computing - HIPAA
KnowHIPAA

KnowHIPAA.com is the only HIPAA information source specifically designed to help Employers, Insurance Companies, HMOs, TPAs, Agents and Brokers comply with the HIPAA Privacy Standards.

MacBain & MacBain, LLC

MacBain & MacBain, LLC, is a management consulting firm dedicated to helping health care leaders find and implement solutions. Our work is noted for being innovative, thorough, and practical. The principals have extensive experience in health plan management, HIPAA privacy regulations, financial management and analysis, health care policy, management consulting, and adult education and training. We can help you: Inventory strengths and weaknesses -- and identify solutions and opportunities; Comply with HIPAA regulations; Analyze financial performance; Write policies and procedures; Develop training programs; Improve contracting relationships between health care providers and health plans; Develop business plans and budgets for start-ups and new services.

Management Systems Consulting, Inc.

HIPAA Glossary
Computer Terms (glossary)

McKesson Information Solutions

McKesson Information Solutions HIPAA Page

Medical-Coding.Net

Medical-Coding.Net brings you several data files to help you comply with the Healthcare Portability and Accountability Act requirements for standardized transaction and code sets. See our Data Files for the code sets that you need and check below for the transaction standards. All files are shipped with the official documentation from ANSI.

Medical Data Applications, Ltd

MDA, Ltd. offers HIPAAzip, a low cost software package that is designed to allow healthcare providers to become compliant with the HIPAA Privacy Rule with a minimal expenditure of time and effort. Included are a complete set of customizable forms, policies, procedures,a notice of privacy practices, a business associate agreement, educational and training aids, reference materials, logs, checklists, and information on preemptive State regulations. The primary focus of the package is to meet the needs of solo healthcare providers, group practices, and multi-specialty clinics, although the information included will also be useful to larger organizations building their own internal HIPAA solutions. We also offer a subscription >service in which users can submit their Privacy Rule related questions and have them answered personally by a nationally recognized HIPAA expert.

MIS Training Institute

...the international leader in audit & information security training

1 EDI Source

HIPAA Product:

PGP Corporation

PGP Corporation, the recognized worldwide leader in secure messaging and data storage, builds products that allow corporations to ensure confidential customer and individual information remains secure.

Principle Logic, LLC

PrivaPlan Associates, Inc.

PrivaPlan is the low-cost alternative to expensive HIPAA compliance consulting services. The resource kit contains everything you need to get your organization into compliance with the requirements of the HIPAA Privacy and Security regulations.

Rachel Foerster & Associates, LTD

Providing HIPAA, EDI, XML, electronic commerce planning, implementation & integration services to deliver total cost reductions

RSG - Recruiter Solutions Group

HIPAAStaff.com

RMW Associates

RMW Associates, HIPAA compliance specialists, stand ready to provide guidance and leadership for initial compliance as well as long-term maintenance and training. We have been actively involved with HIPAA since its inception and offer a complete range of services from initial consultation to annual maintenance audits.

SAIC

SAIC has been involved with HIPAA since 1997 and has the right blend of experience and expertise in strategic planning, business process design, eBusiness operations, and technology to address HIPAA for your strategic eBusiness vision. The HIPAA standards represent the first step in making health care an "eBusiness." Meeting these standards will affect both your business operations and your information technology infrastructure and present an opportunity to streamline your operations and reduce costs. Learn how SAIC's Health eTrust Solution Suite provides the solution you need.

SeginusMD

HIPAA Minder

Siemens Health Services (formerly SMS HIPAA Central)

Siemens can help your health enterprise capitalize on Internet technologies and begin the process of HIPAA compliance through cost-effective services and applications - today. Site includes an overview of HIPAA basics and descriptions of Siemens' available HIPAA services.

3Com Security Net

...is a continuation of 3Com's IT leadership role and commitment to the healthcare industry. The objective of Security Net is to assist the Healthcare industry to deal with patient data/privacy security issues and to provide information and resources that the Healthcare industry may find relevant to consider.

T3i, Inc.

T3i, Inc. is an information security practice comprised of uniquely qualified professionals who provide advice and assistance for critical infrastructure protection, focusing on information security, forensics investigations, intelligence analysis and training. Our goal is to minimize business risk by promoting confidentiality, integrity and availability of information assets.

Train for HIPAA

Tunitas Group

Perspectives on Information Technology for the Health Care Industry

Understanding HIPAA (Concepts In Print)

Understanding HIPAA

VASTS - VisionSite Advanced Staff Training Services

Robust, economical and complete online HIPAA Staff Training. Low yearly subscription price includes unlimited training on all available HIPAA modules and administration tools, with secure, six-year completion certificate and training module storage and retrieval for audit protection.

WebMD Envoy

From Internet solutions to point-of-service devices to fully integrated transaction processing applications, WebMD Envoy offers a full suite of products to automate key business functions in the health care reimbursement cycle. WebMD Envoy is the health care industry's leading clearinghouse for all types of batch and real-time transactions, enabling over two billion transactions each year. Whether you are a payer, a provider, or an IS vendor, WebMD Envoy is your all-payer, all-provider solution for increasing your volume of electronic transactions.

ListServs

globalwindows

Global Windows Internet Engineering Develops .net Frameworks Software. This is the group for HIPAA Discussion. Founded May 21, 2001; 7 members.

HIPAAdvisory

HIPAAlert

HIPAAnotes or

HIPAAlive

hipaassertion

Group commited to take HIPAA in control. Founded June 20, 2001; 5 members.

HIPAA-CISSP

The HIPAA-CISSP discussion list is intended for discourse on the interpretation, implementation, and issues associated with compliance to the HIPAA security regulations. It is expected that the majority of the participants on the list will be CISSP's that are primarily focused on HIPAA compliance issues. Founded November 17, 2000; 355 members as of March 18, 2002.

HipaaConsultant

This group will try hard to address the details of what a consultant needs to have and know in order to work with. There are literally dozens of sites (if not more) that address the high-level "concepts" of HIPAA. Lets get together and address the details. Read and use the experience of other consultants and post your own stories. Founded November 6, 2001; 14 members.

HIPAAITGroup

This group is designed to help with implementation and issues associated with compliance to the HIPAA regulations. It is expected that the majority of the participants are IT Professionals, HR Professionals and Security Officer working together to get through the complex HIPAA compliance issues. Founded August 30, 2001; 17 members.

HIPAATalk2

Discussion of HIPAA regulations and interpretation of the ruling. These discussions are open to all health care professionals that are intersted in understanding HIPAA regulations. Newsletters and other comments are distributed through this service. If there are any newsletters or comments that you think are helpful, please feel free to post them. Founded May 15, 2001; 189 members.

HIPAA-TCS

HIPAA TCS is dedicated to resolving the issues of determining what actions need to be taken as an industry to achieve compliant electronic transactions in the most cost effective and least disruptive manner. Institutional and professional providers, aplication vendors, clearing houses, payers and consultants are welcome and needed. Founded November 20, 2001; 153 members as of March 18, 2002.

IG-Selection

This group will discuss the development of the white paper to explore the question "What HIPAA Implementation Guide to should be used for billing a service?". Goals: (1) To document the extent of the issue, (2) determine areas of agreement, (3) look at areas of less and less agreement, (4) work on describing/defining areas, (organize list into types of service? provider type? Facility type?), (5) possibly come to some consensus regarding the appropriate level of action for either standardizing billing form, or agreeing to live with a certain level of discord on billing and (6) create a SNIP White Paper summarizing our findings and conclusions. Founded August 1, 2001; 2 members.

ISDBenefits

This list is intended as a forum for School District Benefits personnel to share experiences regarding benefits they've implemented or to inquire about benefit programs they're thinking about implementing in order to draw on other Districts' experiences. Questions and inquiries concerning laws and regulations on the state and federal level (Cafeteria Plans, HIPAA, etc) are also within the scope of this list. It is also intended that a database containing benefit information for all districts represented will be maintained by the moderator and be posted to this website to facilitate the transfer of benefit information that would otherwise only be available through many individual calls and e-mails. This list is moderated by Steve Austin, Employee Benefits Manager at Clear Creek ISD. Founded August 3, 1999; 46 members.

LearnHIPAA

The purpose of the list serve is to provide a forum for HUMAN SERVICES staff, agencies, and providers to discuss HIPAA. The primary purpose of the listserve is for peer support and problem solving re HIPAA and Human Services. A place to ask questions, share strategies, etc. Founded May 25, 2001; 106 members as of March 18, 2002.

MAHI-HIPAA

Mid Atlantic HIPAA Implementation (MAHI) - HIPAA Compliance Networking Group for Mid-Atlantic US States. Founded April 24, 2001; 137 members.

mdhipaa

A consortium of health care providers, payors and vendors interested in collaborating on HIPAA. Founded August 1, 2001; 27 members.

mhsip-hipaa

http://www.mhsip.org/hipaa/index.html

PrivaPlan

http://www.PrivaPlan.com

Other Sites

Health Hippo

Medical Records, Privacy & Confidentiality

The resources on this page are intended to bring the internet's resources to the interested individual on medical records, privacy and confidentiality issues. This is an older site, and does not directly address HIPAA.

CPT's Page on Medical Privacy

Consumer Project on Technology - started by Ralph Nader in 1995

Health Privacy Project

Summary of New Federal Health Privacy Regulations

As of November 2002, the following state summaries have been updated and are available online:
Alabama, Alaska, Arizona, Arkansas, California, Colorado, Connecticut, Delaware, District of Columbia, Florida, Georgia, Hawaii, Idaho, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Minnesota, Mississippi, Missouri, Montana, Nebraska, Nevada, New Hampshire, New Jersey, New Mexico, New York, North Carolina, North Dakota, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Utah, Vermont, Virginia, Washington, West Virginia, Wisconsin and Wyoming.

These links were collected and organized by Hammer Logic LLC.
No warranty is stated or implied, and inclusion here does not constitute an endorsement.